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DESCRIPTION 

SYSTEM FOR LOCATING A MOBILE UNIT 

5 The present Invention relates to a system for locating a mobile unit, 

particularly, although not exclusively which includes a wireless local area 
network (LAN). 

It is desirable to locate a mobile unit, such as a cellular telephone 
10 handset or personal data assistant (PDA), so as to provide customised 
services, such as targeting advertisements at potential customers passing a 
shop. 

It is known to locate a mobile unit using the global positioning system 
(GPS). However, GPS, particularly for mass-market use, suffers several 
15 drawbacks. Firstly, it is costly to manufacture a mobile unit including a GPS 
receiver. Secondly, there is delay in locating the mobile unit when it is first 
switched on. Thirdly, it is difficult to locate a mobile unit when it is positioned 
indoors. 

It is also known to locate a mobile unit using wireless local area 
20 networks (LANs). For example, it is possible to locate a mobile unit relative to 
fixed units using so-called "time of arrival" (TOA) method in which a time delay 
is used to calculate the distance between a fixed and a mobile unit. However, 
the TOA method yields coarse results which are accurate to no more than 
about 100 metres. A more accurate method uses "time difference of arrival" 
25 (TDOA) in which a mobile unit receives signals at different times. However, 
the TDOA method requires multiple fixed units. Another method employs high 
chipping rates used to spread a signal across a wider bandwidth. The higher 
chipping rates use shorter pulse lengths, which provides improved resolution. 
A mobile unit may be more accurately located by exchanging 
30 information with fixed units and other mobile units, as described in "An 
Overview of Positioning by Diffusion" by Michael Spratt, Hewlett-Packard 
Laboratories, Bristol, UK, 9 September 2001. 
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The present invention seeks to provide a system for locating a mobile 
unit. According to the present invention there is provided a system for locating 
a mobile unit including means for transmitting a first signal at a relatively high 

5 power, means for transmitting a second signal at a predetermined, relatively 
low power, means for receiving said first signal, means for determining a first 
signal strength of said first signal at said means for receiving said first signal, 
means for determining whether said first signal strength exceeds a relatively 
low threshold level so as to determine whether service may be provided, 

0 means for receiving said second signal, means for determining a second 
signal strength of said second received at received at said means for receiving 
said second signal, means for determining whether said second signal 
strength exceeds a relatively high threshold level so as to locate the mobile 
unit within a known distance of said means for transmitting said second signal. 

5 The relatively high power may be at least 0 dBm, 6 dBm, 13 dBm or 20 

dBm. The relatively low power may be no more than 0 dBm. The relatively 
low threshold level may be no more than -85 dBm. The relatively high 
threshold level may be no less than -65 dBm. The means for transmitting said 
first and second signals may transmit the first and second signals at different 

o times. 

The system may be a wireless local area network. The means for 
transmitting the first signal may be an access point and the means for 
transmitting the second signal may also be an access point. The means for 
receiving the first signal may be a mobile unit and the means for receiving the 

5 first signal may also be a mobile unit. 

The means for transmitting the first signal may be a mobile unit and the 
means for transmitting the second signal may also be a mobile unit. The 
means for receiving the first signal may be an access point and the means for 
receiving the second signal may also be an access point. 

o According to the present invention there is also provided a system for 

locating a mobile unit including a first transmitter for transmitting a first signal 
at a relatively high power, a second transmitter for transmitting a second signal 
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at a predetermined, relatively low power, a first receiver for receiving said first 
signal, a first detector for determining a first signal strength of said first signal 
at said first receiver, a first controller for determining whether said first signal 
strength exceeds a relatively low threshold level so as to determine whether 
5 service may be provided, a second receiver for receiving said second signal, a 
second detector for determining a second signal strength of said second signal 
at said second receiver, a second controller for determining whether said 
second signal strength exceeds a relatively high threshold level so as to locate 
the mobile unit within a known distance of said means for transmitting said 
10 second signal. 

According to the present invention there is also provided a method of 
operating the system. 

Embodiments of the present invention will now be described, by way of 
15 example with reference to the accompanying drawings, in which: 

Figure 1 is a schematic diagram of a wireless local area network; 

Figure 2 is a schematic diagram of a access point 

Figure 3 is a schematic diagram of a mobile unit; 

Figure 4 shows the wireless local area network of Figure 1 deployed in 
20 a room; 

Figure 5 shows a relationship between power of a signal received at a 
mobile unit and distance between the mobile unit and a transmitter; 
Figure 6 is a plot of transmitted power against time; 
Figure 7 is a plot of detection threshold against time; 
25 Figure 8 is another plot of transmitted power against time; 

Figure 9 is another plot of transmitter power against time; 
Figure 10 shows regions in which a mobile unit may be located and 
Figure 1 1 shows the wireless local area network of Figure 1 deployed in 
a room in another configuration. 

30 



Referring to Figure 1, a system for locating a mobiie unit according to 
the present invention is shown. The system comprises a wireless local access 
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network (LAN) 1 including a wired network 2 and a plurality of access points 
3i, 3 2 , 3 3 , 3 4 , 3 5 . A mobile unit 4 is connectable to the wireless LAN 1 via a 
wireless link 5. In this example, the wireless network 1 and mobile unit 4 are 
connectable using radio frequency signals operating in the 2.4 GHz band 

5 according to the IEEE 802.1 1 standard. 

Referring to Figure 2, each access point 3 1f 3 2 , 3 3 , 34, 3s comprises a 
connector 6 to the wired network 2, an input/output section 7, a data 
processing section 8, a radio frequency section 9, an antenna 10 and a 
controller section 1 1 . The input/output section 7 transmits and receives data to 

10 and from the wired network 2 and, amongst other things, buffers data. The 
processing section 8 for instance applies error protection/error detection 
routines and encrypts/decrypts data. The radio frequency section 9 for 
example modulates and demodulates signals and amplifies them. The 
input/output section 7, the data processing section 8, the radio frequency 

15 section 9 are controlled by the controller section 1 1 . 

Referring to Figure 3, the mobile unit 4 comprises a personal computer 
12, such as a lap-top computer, and a wireless transmitter/receiver 13, for 
example in the form of a wireless network card. The wireless 
transmitter/receiver 13 comprises a connector 14 to the personal computer 12, 

20 an input/output section 15, a data processing section 16, a radio frequency 
section 17, an antenna 18 and a controller section 19, and have substantially 
the same functions as the corresponding sections of the wireless access point. 

Further details regarding the wireless LAN 1 and the wireless 
transmitter/receiver 13 are described in Chapter 5 of "Deploying Wireless 

25 LANs" by Gil Held (McGraw-Hill, 2002). 

Referring to Figure 4, the access points 3i, 32, 3 3 , 34, 3 5 are deployed in 
a room 20. In this example, the access points 3i, 32, 3 3 , 34, 3 5 are positioned 
in corners 21 of the room 20, some of which are located by doorways 22, and 
in the centre 23. The positions of the access points 3i, 32, 3 3 , 3 4 , 3 5 are known 

30 and may be labelled (xi, yi), (x 2 , y 2 ), (x 3 , y 3 ), (X4, y 4 ) and (xs, y 5 ) respectively. 
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The mobile unit 4 may be located using an access point 3i, 32, 33, 34, 
3s, as will now be explained: 

Each access point 3i, 3 2 , 3 3 , 34, 3 5 is a transmitter and receiver. An 
access point 3i, 3 2 , 3 3 , 3 4 , 3 5 can transmit a signal at a selectable transmission 
5 power level, P*. In this example, there are four selectable power levels, 
namely 20 dBm (100 mW), 13 dBm (20 mW), 6 dBm (4 mW) and 0 dBm (1 
mW). Other power levels may be used. For example, the highest power level 
may be 30 dBm (1000mW). 

The mobile unit 4 is also a transmitter and receiver. The mobile unit 4 
10 can measure the power of a signal received by the antenna 18 and define a 
received signal strength indication (RSSI). This may be implemented in the rf 
section 17 (Figure 3). In this example, there are 16 RSSI levels ranging from 
level 0, which corresponds to a minimum detection level, in this case -85 dBm, 
to level 15 which corresponds to a maximum allowable input level, in this 
5 example -10dBm, in 5 dBm intervals. 

The mobile unit 4 sets a detection threshold, P de t- In this example, 
setting the detection threshold comprises measuring the signal strength and 
determining whether the received signal strength equals or exceeds the 
detection threshold. In an alternative embodiment, setting the detection 
20 threshold may comprises selecting a gain of the receiver 4, which limits the 
level of signal which can be detected, and determining whether a signal is 
detected. 

Referring also to Figure 5, a signal 24 transmitted by the access point 3 5 
and received at the mobile unit 4 is attenuated. The received signal strength, 
25 Po<, is inversely proportional to the square of the distance, r, separating the 
access point 3s and the mobile unit 4, i.e. Prx °c 1/r 2 . If the mobile unit 4 
detects the signal 24, then the mobile unit 4 is located within a radius R of the 
access point 3 5 . 

A low transmission power level Ptx, for example OdBm, and a high 
30 detection threshold Pdet, preferably -65dBm, are selected so as locate the 
mobile unit 4 accurately, in this case within a radius of 10 metres of the 



WO 2004/014096 



PCT/IB2003/003222 



6 

wireless access point 3 5 . However, a higher transmission power level Ptx and 
a lower detection threshold P de t are used, for example for providing service. 

The mobile unit 4 may be located using an access point 3i, 3 2 , 3 3 , 3 4 , 3 5 
under different situations: 

Location prior to connection to wireless LAN 1 

A mobile unit 4 may access a cell served by an access point 3i, 3 2 , 3 3 , 

34, 3 5 , usually referred to as a basic service set (BSS), by listening for a 
beacon frame transmitted by an access point 3i, 3 2 , 3 3 , 3 4 , 3 5 . This process is 
known as passive scanning. Beacon frames are defined in a medium access 
control (MAC) sub-layer of the IEEE 802.11 standard. 

A modified passive scanning process is used to locate the mobile unit 4. 

Referring to Figure 6, the access point 3 5 transmits first and second 
beacon signals 24i, 24 2 . The beacon signals 24i, 24 2 are repeatedly 
transmitted, for example every 20 milliseconds to 1 seconds, preferably every 
1s. The first signal 24i is transmitted at a high transmission power Pl for 
example 20 dBm (100 mW), and the second signal 24 2 is transmitted at a low 
transmission power P 2 , in this case 0 dBm (1 mW). 

Referring to Figure 7, the mobile unit 4 listens for signals in passive 
scanning mode, measuring received signal strengths and determining whether 
they exceed first and second signal detection thresholds P A , Pb respectively. 
The first signal detection threshold P A is low, for example -85dBm, and the 
second signal detection threshold Pb is high, for example -65dBm. Thus, if a 
received signal has a power P| lying between P A and P B (Pa < Pi < Pb), then it 
exceeds P A and is detected. However, Pi falls below P B and is not detected. 

Therefore, the detectable range Ri for the first signal 24i transmitted at 
Pi and detected with the first threshold P A is usually about 100 metres 
assuming a clear line of sight between the mobile unit 4 and the access point 

3 5 . The detectable range R 2 for the second signal 24 2 transmitted at P 2 and 
detected with the second threshold P B is about 10 metres. 

Thus, if the mobile unit 4 detects the second signai 24 2 , then it is within 
10 metres of the access point 3s. The position of the access point 3s is 
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preferably included in the beacon frame to permit the mobile unit 4 to locate 
itself. Additionally or alternatively, the mobile unit 4 may return a signal to the 
access point 3 5 identifying itself and the fact that it has detected the second 
signal 24 2 . This allows the access point 3 5 or the wireless LAN 1 to locate the 
5 mobile 

Location after connection to wireless LAN 1 

Once the mobile unit 4 has joined a cell, it may stay there or roam to 
another cell without losing a connection. In either case, the mobile unit 4 is 

10 connected to an access point 3i, 3 2 , 3 3 , 3 4 , 3 5 and may exchange 
management, control and data frames. However, the mobile unit 4 may 
monitor a low power signal using the high threshold thereby allowing the 
location of the mobile unit 4 to be determined. 

Referring to Figure 8, the access point 3 5 transmits a third signal 24 3 

15 comprising management, control or data frames at one or more high power 
levels P 3 , P4. The power levels P 3 , P 4 may be adapted as power varies due to 
change in position of the mobile unit 4. Periodically, the access point 3 5 
transmits a fourth signal 24 4 at the low power level P 2 . 

The mobile unit 4 determines RSSI with first and second thresholds P A , 

20 P B as described earlier. The detectable range R 3 for the third signal 24 3 
transmitted at P 3 , P 4 and measured with the first threshold P A is about 10 to 
100 metres and the detectable range R4 for the fourth signal 24 4 transmitted at 
P 2 and measured with the second threshold P B is about 1 0 metres. 

Therefore, the mobile unit 4 may be provided with service by the access 

25 point 3 5 in a relatively large area, for example within a radius of between 10 
and 100 metres, and should it pass near to the access point 3 5 , it can be 
located within a smaller area, for instance within a radius of 10 metres. 

Variable detection thresholds 
30 The mobile unit 4 described earlier selects a single threshold P B for 

accurate location. However, the mobile unit 4 may be modified to vary a 
locating threshold P toc , for example from a low value P A , to a value P B so as 
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determine for example, whether it is 30 metres or 10 metres away from the 
access point 3s. 

Referring to Figure 9, the threshold P de t alternates between a value P A 
used for normal operation to the locating threshold P| OC , the locating threshold 
5 being stepped from P A , P c to P B , wherein P a <Pc<Pb- 

Referring to Figure 10, this approach allows the mobile unit 4 to be 
located to varying degrees of accuracy, as indicated by circles 25^ 25 2 , 25 3 of 
increasing radius. 

Furthermore, it allows the mobile unit 4 to be located within annuli 26i, 
10 26 2 if the mobile unit 4 is not located within an inner circle 25i,25 2 but is 
located in an outer circle 252, 253. 

Further details regarding the IEEE 802.11 standard are described in 
Chapter 6 of "Deploying Wireless LANs" ibid. 

15 Different transmitters, different transmission power 

In the embodiments hereinbefore described, the wireless LAN 1 is 
configured such that each access point 3<\, 3 2 , 3 3 , 3 4> 3 5 multiplexes 
transmission power between a relatively high power for delivering service and 
relatively low power for locating the mobile unit 4. 

20 Referring to Figure 11, the wireless LAN 1 may be alternatively 

configured such that it comprises a first set of access points, for example 
access points 3i, 3 2 , 33, 34, which transmit at relative high transmission power, 
such as 20 dBm (100 mW), and a second set of access points, for example 
access point 3s, which transmit at relatively low transmission power, for 

25 instance 0 dBm (1 mW). The relatively high transmission power may be a 
range of relatively high transmission powers, preferably greater than 0 dBm (1 
mW). 

The wireless LAN 1 is arranged such that each of the access points in 
the second set lies within coverage of at least one access point of the first set. 
30 For clarity, regions of coverage provided by third and fifth access points 3 3 , 3 5 
are shown. Thus, in the alternative configuration, the first set of access points 
can deliver service to the mobile unit 4, while the second set of access points 
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may be used for location. For example, the mobile unit 4 may be connected 
to, and provided with service by, the third access point 33, while passively 
scanning for third access point 3 5 . If the mobile unit 4 receives a signal from 
the third access point 3 5l it may use the signal for location in the manner 
5 described earlier. 

The alternative arrangement has several advantages. It is simple to 
implement, thus reducing cost and complexity. It reduces latency and 
increases quality of service. 

10 In the embodiments described earlier, location is performed using the 

access points 3i, 3 2 , 3 3 , 34, 3 5 as transmitters and the mobile unit 4 as a 
receiver. However, the earlier embodiments may be modified such that the 
role of the access points 3i, 32, 33, 34, 3s as transmitter and the role of the 
mobile unit 4 as receiver are reversed. In other words, the mobile unit 4 may 

15 be configured to transmit a signal at a low transmission power, for example 0 
dBm (1 mW), while the access points 3i, 3 2 , 3 3 , 3 4 , 3 5 are configured to set a 
high signal power detection threshold. Thus, if an access point 3i, 3 2 , 33, 34, 
3 5 detects the signal transmitted at the low power by the mobile unit 4, the 
access point is able to locate the mobile unit 4 accurately. Optionally, it may 

20 share location information with the mobile unit 4. 

In another modification, the access point 3i, 3 2 , 33, 34, 3s may be used 
as transmitters transmitting at a high transmission power for delivering service, 
while the mobile unit 4 may be used as a transmitter transmitting at low 
transmission power for location. 

25 

From reading the present disclosure, other variations and modifications 
will be apparent to persons skilled in the art. Such variations and modifications 
may involve equivalent and other features which are already known in the 
design, manufacture and use of systems for locating mobile units and 
30 component parts thereof and which may be used instead of or in addition to 
features already described herein. For example, an ad-hoc iocal area network 
or a plurality of devices conforming to Bluetooth™ specifications may be used 
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instead of the wireless LAN 1 and mobile unit 4. The mobile unit 4 may be a 
personal data assistant (PDA) or a cellular telephone handset. 

Although Claims have been formulated in this Application to particular 
combinations of features, it should be understood that the scope of the 
5 disclosure of the present invention also includes any novel features or any 
novel combination of features disclosed herein either explicitly or implicitly or 
any generalisation thereof, whether or not it relates to the same invention as 
presently claimed in any Claim and whether or not it mitigates any or all of the 
same technical problems as does the present invention. The Applicants 
10 hereby give notice that new Claims may be formulated to such features and/or 
combinations of such features during the prosecution of the present 
Application or of any further Application derived therefrom. 



